Article author: Like sadness
Source of information: Evil Octal Security Team
background:
dvbbs7.1 added an access database to the background backup to check. So the original gif image is no longer possible to restore it to the backdoor.
Solution:
I inserted the asp * into the database and recovered. This will definitely be a check.
Specific process:
Prerequisite:
(The default installation situation is the basis, and it depends on yourself to grasp the specific situation.)
You get the forum dvbbs7.1 backend.
1. I have already made a database: an encrypted asp backdoor is inserted into it [that is the backdoor that writes horses]
At the same time, the name has been modified to (the article was downloaded at the end)
＝＝＝Supplement: The key is that this picture is useful because it is an access database [see the last detailed explanation] ===
2. Upload this and select the place where you posted the post. Because this place will not check the feature code of the text gif.
(Don't choose to upload it in the place where the avatar is uploaded.)
3. Record the uploaded address and go to the background to restore it to the backdoor.
4. Execute the backdoor and write a new backdoor. Test the function and complete.
Note: If the forum does not have the option to start uploading files to the background.
I won’t say that the records of uploading files are erased.
Solution: I still delete the backup and recovery functions as before.
The above database is in the compressed package.
Download database pictures with backdoor
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
Some people can't understand my article, it seems that my article has not been written clearly:
Since that's the case: I'll add in detail:
[Background: dvbbs7.1 adds access database to the background backup and checks. So the original gif image is no longer possible to restore it to the backdoor] The complete explanation is:
Because the following code was added to dvbbs7.1 to check the file type to ensure that the file is indeed an access database.
The gif image (even if GIF89a is added) that is directly modified by the asp *, cannot pass the verification of the following code.
Judging from the following code, it can only be a real access file. All of them use the access database, so that they can pass the check. Just added a backdoor to access.
Maybe it is because I still use the gif file (it is the same as it is used, as long as it is inserted into the ccess database on the backdoor), which has caused some people to misunderstand.
－－－－The following code comes from the file in dvbbs7.1---－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－�
Set Fileconn = ("")
FileConnStr
If Err Then
Set Fileconn = Nothing
"The backed up file is not a legal database."
Exit Sub
Else
Set Fileconn = Nothing
End If
Source of information: Evil Octal Security Team
background:
dvbbs7.1 added an access database to the background backup to check. So the original gif image is no longer possible to restore it to the backdoor.
Solution:
I inserted the asp * into the database and recovered. This will definitely be a check.
Specific process:
Prerequisite:
(The default installation situation is the basis, and it depends on yourself to grasp the specific situation.)
You get the forum dvbbs7.1 backend.
1. I have already made a database: an encrypted asp backdoor is inserted into it [that is the backdoor that writes horses]
At the same time, the name has been modified to (the article was downloaded at the end)
＝＝＝Supplement: The key is that this picture is useful because it is an access database [see the last detailed explanation] ===
2. Upload this and select the place where you posted the post. Because this place will not check the feature code of the text gif.
(Don't choose to upload it in the place where the avatar is uploaded.)
3. Record the uploaded address and go to the background to restore it to the backdoor.
4. Execute the backdoor and write a new backdoor. Test the function and complete.
Note: If the forum does not have the option to start uploading files to the background.
I won’t say that the records of uploading files are erased.
Solution: I still delete the backup and recovery functions as before.
The above database is in the compressed package.
Download database pictures with backdoor
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
Some people can't understand my article, it seems that my article has not been written clearly:
Since that's the case: I'll add in detail:
[Background: dvbbs7.1 adds access database to the background backup and checks. So the original gif image is no longer possible to restore it to the backdoor] The complete explanation is:
Because the following code was added to dvbbs7.1 to check the file type to ensure that the file is indeed an access database.
The gif image (even if GIF89a is added) that is directly modified by the asp *, cannot pass the verification of the following code.
Judging from the following code, it can only be a real access file. All of them use the access database, so that they can pass the check. Just added a backdoor to access.
Maybe it is because I still use the gif file (it is the same as it is used, as long as it is inserted into the ccess database on the backdoor), which has caused some people to misunderstand.
－－－－The following code comes from the file in dvbbs7.1---－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－�
Set Fileconn = ("")
FileConnStr
If Err Then
Set Fileconn = Nothing
"The backed up file is not a legal database."
Exit Sub
Else
Set Fileconn = Nothing
End If